Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/2F56061047D611EFA85F2F4A762E951A.roa
File: 2F56061047D611EFA85F2F4A762E951A.roa (raw, json)
Hash identifier: wIb7gyjPvQ3Ze6RPo6Ek3K5aGCBXFe2VDbA99dK1iC8=
Subject key identifier: 3B:08:78:25:5C:AA:84:35:2E:EF:B3:CD:A6:67:9D:FD:90:70:EB:20
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 9DE3
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/2F56061047D611EFA85F2F4A762E951A.roa
Signing time: Mon 22 Jul 2024 02:57:51 +0000
ROA not before: Mon 22 Jul 2024 02:57:48 +0000
ROA not after: Fri 23 Aug 2024 02:57:48 +0000
asID: 44559
IP address blocks: 156.246.237.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 40419 (0x9de3)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Jul 22 02:57:48 2024 GMT
Not After : Aug 23 02:57:48 2024 GMT
Subject: CN=669dcaaf-1d2c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:bb:a1:0f:99:c5:b3:25:36:56:9e:1c:64:24:
3f:fd:e9:56:45:d2:da:c4:7c:59:e9:6f:fa:29:10:
35:b3:39:13:1a:bc:b4:9c:91:9f:b6:a0:a0:c8:91:
28:c8:3f:54:93:2b:19:08:32:d8:cf:86:2a:08:ca:
1e:29:29:4f:3a:19:93:2b:32:87:3c:3f:ac:84:ca:
a9:fd:5c:34:29:fc:41:73:ac:b5:35:cf:79:64:2a:
43:4f:67:52:e0:10:49:e7:7d:a6:66:de:af:ed:db:
26:ef:e1:dd:f2:92:fb:3d:96:f9:73:d9:b7:3b:91:
6c:b8:3d:2e:70:bf:c2:90:ca:eb:09:ac:2e:28:cb:
3a:67:93:84:81:dc:67:a8:a0:f9:3e:b8:f6:f6:85:
10:70:9c:7d:37:78:ae:c7:6c:53:a2:76:17:bc:df:
c8:f2:21:58:54:48:ad:8a:5a:37:c8:7f:ce:79:0f:
e7:bc:12:b2:1a:c4:6d:0e:ee:b7:f8:c3:ac:03:4b:
9d:1a:ff:5a:4e:fd:b0:06:88:9d:e7:59:4f:9b:3a:
99:e4:96:47:0b:4c:21:ac:5b:ff:85:85:52:5e:f3:
e4:52:aa:d0:d6:61:3e:f1:20:00:f1:ef:de:3f:55:
6d:e1:bd:ed:e0:a5:51:2f:a1:23:13:74:c5:8b:34:
17:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3B:08:78:25:5C:AA:84:35:2E:EF:B3:CD:A6:67:9D:FD:90:70:EB:20
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/2F56061047D611EFA85F2F4A762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.246.237.0/24
Signature Algorithm: sha256WithRSAEncryption
6a:41:36:df:61:68:9f:c9:b3:b1:4e:c5:bf:2f:13:69:cb:e5:
57:df:80:43:05:26:f5:e0:d7:64:59:f5:20:65:de:ae:d2:30:
ed:24:4b:8e:4f:34:4e:e2:3a:f5:81:d0:b3:b1:18:42:f4:47:
7d:52:4f:95:37:2e:32:18:2c:e5:5f:bd:1c:70:3b:7e:99:3e:
0e:a7:36:ef:b0:1d:05:33:16:13:b5:af:c8:8e:bb:9b:bc:f5:
9d:7e:49:e8:96:0c:38:49:fc:76:25:2c:1a:97:2a:5c:8e:96:
de:cc:69:30:ba:6e:84:d5:b4:6a:4f:41:0e:fb:d3:88:6a:d9:
97:1b:3a:f2:2f:a2:27:41:f1:7f:f9:b1:92:dd:a6:5e:a9:67:
b1:fc:5f:ad:5a:35:4a:87:bf:85:5f:55:53:48:80:e1:83:b9:
a5:e6:1a:17:2b:c9:fc:9c:b1:e0:e4:0d:7e:eb:fd:2b:fb:48:
ce:ba:75:37:04:e4:be:d2:d6:b6:a2:ae:6a:f4:22:55:60:e4:
6f:71:72:c0:55:19:54:2f:eb:c2:a0:0f:90:50:61:a5:5f:46:
80:6b:1b:01:6c:51:6e:3e:67:a9:bb:65:79:8e:ae:3e:4d:5c:
fa:fa:28:64:5e:e7:b0:e7:49:5e:65:cd:dc:df:28:a4:54:33:
72:db:67:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 23 12:55:01 2024 by rpki-client on console-ams.rpki-client.org